Analysis

  • max time kernel
    44s
  • max time network
    50s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    06/11/2022, 05:19

General

  • Target

    854cdffc2d18589a52a017b95073e2b6f537a93efae4baa0afe80e156fd6a4de.dll

  • Size

    78KB

  • MD5

    2a2c5ea6cabeafe4a555847b973efda9

  • SHA1

    59decae17dbe63ad1d46d4af3c5767e7159b5ec0

  • SHA256

    854cdffc2d18589a52a017b95073e2b6f537a93efae4baa0afe80e156fd6a4de

  • SHA512

    61cc2f61c01244e47087ecca933a08cbaf56dcce87133b8c5b7740cfe1787220864c482ae7ffb5944dfbc1fb7cd323a3425e3c7942c9ebb1cea42c6386a795ae

  • SSDEEP

    1536:38A13OxEeNTHP817kHiJ/CbmdBUzgopSwQNWA1f:3VxOxEeNTvK6U/Cbix1eAd

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\854cdffc2d18589a52a017b95073e2b6f537a93efae4baa0afe80e156fd6a4de.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1200
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\854cdffc2d18589a52a017b95073e2b6f537a93efae4baa0afe80e156fd6a4de.dll,#1
      2⤵
        PID:828

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/828-55-0x0000000075AC1000-0x0000000075AC3000-memory.dmp

            Filesize

            8KB

          • memory/828-56-0x0000000040960000-0x0000000040971000-memory.dmp

            Filesize

            68KB